Falhas do tipo CWE-787

5.139 resultados

Escrita fora dos limites de memória

Ocorre quando um programa escreve dados em um endereço de memória fora da área alocada para um buffer ou variável. O código não valida o tamanho ou índice antes de gravar, permitindo sobrescrita de dados adjacentes, corrupção de estruturas críticas ou execução de código arbitrário.

Exemplo

Um formulário web que copia dados do usuário para um buffer de 256 bytes sem validar o tamanho da entrada. Se o atacante envia 500 bytes, a escrita transborda e sobrescreve a pilha, podendo hijackear o endereço de retorno da função.

Como mitigar

Use funções seguras de cópia (strncpy, strlcpy ao invés de strcpy; memcpy com tamanho máximo explícito) e sempre valide comprimento e índices antes de escrever. Em linguagens modernas, prefira estruturas com bounds-checking automático (arrays em Java, Rust, etc).

CVE-2022-28841HIGHAdobe Bridge Font Out-of-bounds Write Remote Code Execution VulnerabilityEPSS 2.4%CVE-2022-28840HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.4%CVE-2022-24097HIGHAdobe After Effects Out-of-bounds Write could lead to Arbitrary code executionEPSS 2.4%CVE-2022-30114HIGHA heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, aEPSS 2.4%CVE-2022-23282HIGHPaint 3D Remote Code Execution VulnerabilityEPSS 2.4%CVE-2024-20726HIGH[TianfuCup] JP2K Image Parsing Out-Of-Bounds WriteEPSS 2.4%CVE-2019-19378HIGHIn the Linux kernel 5.0.21, mounting a crafted btrfs filesystem image can lead to slab-out-of-bounds write access in index_rbio_pages in fs/EPSS 2.4%CVE-2023-20109MEDIUMA vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an EPSS 2.3%KEVCVE-2021-35994HIGHAdobe After Effects JPEG2000 Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-21053HIGHAdobe Illustrator Out-Of-Bounds Write Vulnerability Could Lead To Remote Code ExecutionEPSS 2.3%CVE-2022-30664HIGHAdobe Animate SVG File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2021-28596HIGHAdobe FrameMaker PDF File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-23186HIGHAdobe Illustrator Out-of-bounds Write could lead to Arbitrary code executionEPSS 2.3%CVE-2021-36072HIGHAdobe Bridge SGI File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-24105HIGHAdobe Photoshop U3D File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-28275HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-28278HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-28844HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-28276HIGHAdobe Photoshop Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%CVE-2022-28845HIGHAdobe Bridge Font Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityEPSS 2.3%